critical
advisory
Zoho ManageEngine Log360 and EventLog Analyzer unauthorized access (CVE-2026-13594)
Zoho ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.
CVE search metadata
CVE search record: CVE-2026-13594. Severity: critical. CVSS: 9.1. KEV: no. Product: ManageEngine Log360 (<= 13062), ManageEngine EventLog Analyzer (<= 13062). Brief: Zoho ManageEngine Log360 and EventLog Analyzer unauthorized access (CVE-2026-13594). Brief link: https://feed.craftedsignal.io/briefs/2026-11-manageengine-unauth-access/
Triage facts
Revision 1- Applicability
- ManageEngine Log360 (<= 13062), ManageEngine EventLog Analyzer (<= 13062)
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 1 public source
- Freshness
- Revision 1Nov 3, 11:57 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-13594 affects Zoho ManageEngine Log360 and EventLog Analyzer versions 13062 and below. The vulnerability allows an adversary to gain unauthorized access to the product.